[squid-users] over time squid slows down

From: Ben Collver <collver@dont-contact.us>
Date: Mon, 17 Jul 2006 11:54:12 -0700

Good day,

I am running a no-cache transparent proxy using squid 2.5.13 and
ipfilter on NetBSD/i386 3.0.

About every 2 or 3 weeks, it slows down and web browsing grinds to a
halt. Restarting the squid daemon fixes the issue for another 2 weeks.

While this is happening, top reports that the load is low, and squid is
not using much memory.

My squid configuration is at the end of this message. Can anyone give
advice on how to trouble-shoot this or ideas on what I may be doing
wrong?

Thank you,

Ben

http_port 127.0.0.1:3128
icp_port 0
udp_incoming_address XXX.XXX.XXX.XXX
udp_outgoing_address 255.255.255.255
hierarchy_stoplist cgi-bin ?
acl never-cache src 0.0.0.0/0.0.0.0
no_cache deny never-cache
cache_dir null /tmp
cache_access_log /LOGDIR/squid/access_log
cache_log /LOGDIR/squid/cache_log
cache_store_log none
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
shutdown_lifetime 1 seconds
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
acl our_networks src XXX.XXX.XXX.XXX/XX
http_access allow our_networks
http_access deny all
http_reply_access allow all
icp_access deny all
tcp_outgoing_address XXX.XXX.XXX.XXX
cache_mgr root
mail_program /usr/bin/mailx
cache_effective_user squid
httpd_accel_host virtual
httpd_accel_port 0
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
logfile_rotate 60
coredump_dir /var/squid/cache
Received on Mon Jul 17 2006 - 12:54:20 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Aug 01 2006 - 12:00:01 MDT